ICSA-21-131-13

icsaUScisa_csaf_ot

Siemens SINAMICS Medium Voltage Products Telnet (Update A)

Advisory ansehen veröffentlicht 2021-05-11

Successful exploitation of this vulnerability could allow an attacker to gain full remote access to the HMI.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-15798UScritical9.8OT erhöht—
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • BehobenSINAMICS GH150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS GL150 (with option X30)

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS GM150 (with option X30)

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS SH150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS SL150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS SM120

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS SM150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • BehobenSINAMICS SM150i

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan